Search

Phishing is a crime

What is phishing

Phishing is an online crime in which a perpetrator attempts to acquire sensitive information such as username, password, personal information, credit card and/or banking details by masquerading as a legitimate or trustworthy entity, or by impersonating a victim.

Phishing is also used to trick victims into downloading malware on to their devices to enable various cyberattacks, including ransomware, using links or attachments in otherwise legitimate-looking emails, text messages or direct messages on social media.

Phishing-as-a-service (PHaaS) kits make this form of cyberattack more accessible. Be aware that acquiring and using a phishing kit (or exploit kit) is a criminal act.

What the law says

Phishing is a crime, and may constitute fraud under Section 380(1) of the Criminal Code, with a maximum penalty of 14 years' imprisonment.

Further, Canada's anti-spam legislation, prohibits the sending of unsolicited commercial electronic messages. Under section 20(4) of Canada's anti-spam legislation, "any person who contravenes Canada's anti-spam legislation may be subject to a maximum administrative monetary penalty of up to $1 million in the case of an individual, and up to $10 million in the case of any other person".

It is not illegal to enter the term "phishing" or other related terms into a web browser or search engine.

Consequences of committing phishing attacks and other cybercrimes

The RCMP and its Canadian police partners take cybercrime seriously. We work with national and international partners to find and apprehend offenders, and to disrupt fraud and cybercrime threats to protect Canadians.

If you commit a cybercrime, you could face the following consequences, among others:

Make the right choice

The RCMP is committed to helping people make informed choices online. Cybercrimes have a real and devastating impact on victims, and can ruin the life of individuals who choose to commit them.

There are many positive and lawful ways to use cyberskills:

Cyber security technicians and experts are in high demand in many fields, such as policing, security, science, mathematics, computing and engineering, as well as business administration, social sciences and others.

For more information on cyber careers, visit:

Reporting fraud or cybercrime

Check if your email address has been exposed in a data breach: Have I Been Pwned.

If you have been the victim of fraud or cybercrime or have witnessed a fraud or cybercrime, please report it to local police and the Canadian Anti-Fraud Centre.

Related links

Date modified: